CVE-2013-6666

The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepperflashrendererhost.cc in Google Chrome before 33.0.1750.146 does not verify that all headers are Cross-Origin Resource Sharing CORS simple headers before proceeding with a PPBFlash.Navigate operation, which might allow remot...

CVE-2013-6666

The CVE-2013-6666 entry affects Google Chrome prior to 33.0.1750.146, where PepperFlashRendererHost::OnNavigate did not verify that all headers were Cross-Origin Resource Sharing (CORS) simple headers before performing a PPB_Flash.Navigate. This could allow a remote attacker to bypass CORS restri...